Privacy Policy

Last updated: June 2026

1. Introduction

Royal Pop Style is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Belgian data protection law.

2. Data Controller

Brahim Korkdan — Royal Pop Style
53 Rue de Schoppach, 6700 Arlon, Belgium
BCE: 0869.820.081 — VAT: BE0869.820.081
Email: contact@royalpopstyle.com
Phone: +32 475 47 96 80

3. Personal Data We Collect

• Identity data: first name, last name
• Contact data: email address, phone number
• Delivery data: shipping and billing address
• Transaction data: order details, products purchased, payment method type (we do not store card numbers)
• Technical data: IP address, browser type, device type, pages visited (via cookies and analytics)
• Marketing data: communication preferences (only if you opt in)

4. Purpose and Legal Basis

• Processing and fulfilling your order — Art. 6(1)(b) Contract performance
• Customer support — Art. 6(1)(b) Contract performance
• Accounting and tax compliance — Art. 6(1)(c) Legal obligation
• Fraud prevention — Art. 6(1)(f) Legitimate interest
• Website analytics — Art. 6(1)(f) Legitimate interest
• Marketing emails — Art. 6(1)(a) Consent (withdrawable at any time)

5. Data Sharing

We share data only with: Shopify Inc. (e-commerce platform), payment processors (Shopify Payments), shipping carriers, Google Analytics (anonymised). We never sell, rent, or trade your data.

6. Data Retention

• Order data: 7 years (Belgian tax law)
• Marketing data: until unsubscribe + 3 years
• Analytics data: 13 months
• Cookie consent: 12 months

7. Cookies

• Strictly necessary: required for cart and checkout. Cannot be disabled.
• Analytics: Google Analytics — only with your consent.
• Marketing: only with your consent.

8. Your Rights (GDPR)

You have the right to: access, rectify, erase, restrict, object to processing, and data portability. To exercise these rights: contact@royalpopstyle.com — we respond within 30 days.

9. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Royal Pop Style will notify the Belgian Data Protection Authority within 72 hours of becoming aware of the breach, in accordance with GDPR Art. 33. If the breach is likely to result in a high risk to your rights, we will also notify you directly without undue delay, including a description of the nature of the breach and the measures taken to address it (GDPR Art. 34).

10. Right to Lodge a Complaint

Belgian Data Protection Authority: www.autoriteprotectiondonnees.be
Rue de la Presse 35, 1000 Brussels — +32 (0)2 274 48 00

11. Third-Party Processors

• Shopify Inc. (Canada) — e-commerce platform
• Google LLC (USA) — Analytics (GA4), consent-based only

All processors operate under GDPR-compliant data processing agreements and Standard Contractual Clauses (SCCs).

12. Changes

The current version of this policy is always available at royalpopstyle.com/policies/privacy-policy.